Jul 2024 – Present · 1 yr 8 mos · Thiruvananthapuram, Kerala, India · Remote

• Manages a team of L1 SOC analysts, trainees, and shadow interns, overseeing 24/7 SOC operations while conducting training sessions for new interns on IT, Networking, and Cybersecurity basics. Provides hands-on tool training and assessments to ensure operational readiness. Skilled in client management, creating and approving weekly, monthly, and ad-hoc reports, dark web monitoring using Foresiet's Integrated Digital Risk Protection Platform for credential leaks, PII leaks, data leaks, undisclosed leaks, etc, and creating and sending tickets to clients when necessary.
• Works closely with management on SOC team scheduling, task assignment, and maintaining trackers for operational continuity. Proficient in data analysis, incident response, and threat hunting, with expertise in SIEM tools such as CDC-ON, SentinelOne, AlienVault, and Dataset (Scalyr) for alert analysis. Conducts email security assessments using Sophos, integrates SIEM solutions across client environments, coordinates with SIEM support to resolve issues, and manages client deliverables and project timelines. Supporting in recruiting interns and outsourcing new employees. Working on ISO 27001 readiness projects internally and for external organizations

Jul 2023 – Jul 2024 · 1 yr · Thiruvananthapuram, Kerala, India · Remote

• Experienced in supervising and working within a 24/7 Security Operations Center (SOC) to detect, assess, and mitigate security threats. Skilled in continuous data analysis, incident response, and proactive threat hunting, with expertise in SIEM tools such as CDC-ON, SentinelOne, AlienVault, and Dataset (Scalyr) for alert analysis. Conducts email security assessments using Sophos email security and integrates SIEM solutions across client assets. Monitors IT infrastructure for multiple organizations to protect against cyber-attacks, and develops Runbooks, SOPs, dashboards, and watchers, as well as sending tickets if malicious activities were observed. Engages with SIEM support to resolve issues, manages client interactions and deliverables, and oversees project management. Also responsible for creating client reports and managing SOC team shift rosters. Conducts training sessions for new interns, covering foundational topics in IT, Networking, and Cybersecurity. Provides hands-on tool training and assessments to ensure readiness for operational tasks. Assisted on ISO 27001 projects in document creation.

Feb 2023 – Jun 2023 · 4 mos · Thiruvananthapuram, Kerala, India · Remote

• Acquired foundational IT, Networking, and Cybersecurity knowledge, with hands-on training in SIEM tools such as CDC-ON, AlienVault, SentinelOne, Dataset, and Sophos email security. Gained expertise in developing Runbooks, Playbooks, SOPs, threat hunting, dashboard and watcher creation, log analysis, correlation, alert analysis, and ticket creation. Additionally, supported L1 and L2 analysts in a 24/7 Security Operations Center (SOC) environment, contributing to continuous monitoring and threat mitigation efforts.